Re: Unable to do Port Mirroring with OpenWRT firmware on Buffalo WZR-HP-G300NH2 Router

[Teo En Ming <teo.en.ming () gmail com>]

Both dd-wrt and OpenWRT don't work for me (in terms of port mirroring for
snort). I am very disappointed.

Teo En Ming


On Sun, Apr 6, 2014 at 5:07 AM, Bill Parker <wp02855 () gmail com> wrote:

> I will need to research this, but if you have access to IRC (internet
> relay chat), on freenode network, there is a official OpenWRT channel,
> which you can get help on mirroring (which is what you're looking for).  I
> will continue to research this issue for you as well (I don't have a router
> which runs OpenWRT at the moment, otherwise I would look at this for you
> directly).
>
> Bill
>
>
> On Sat, Apr 5, 2014 at 12:41 PM, Teo En Ming <teo.en.ming () gmail com>wrote:
>
> > Dear Bill Parker,
> >
> > Previously I mentioned that I have bricked my Buffalo WZR-HP-G300NH2
> > router after migrating from dd-wrt to OpenWRT firmware. I have since
> > de-bricked/recovered/re-flashed my Buffalo router after following
> > instructions from the following URL:
> >
> > http://g300nh.blogspot.sg/2010/06/firmware-flash-and-brick-recovery.html
> >
> > I have flashed my Buffalo WZR-HP-G300NH2 router with OpenWRT attitude
> > adjustment 12.09 firmware.
> >
> > I have also installed the iptables-mod-tee module using the following
> > commands:
> >
> > # opkg update
> >
> > # opkg list | grep -i tee
> >
> > # opkg install iptables-mod-tee
> >
> > However, I still cannot get port mirroring to work with Snort.
> >
> > Here is what happens:
> >
> > root@OpenWrt:/lib/modules/3.3.8# iptables -t mangle -A PREROUTING -j TEE
> > --gateway 192.168.1.40
> > iptables: No chain/target/match by that name.
> > root@OpenWrt:/lib/modules/3.3.8# iptables -t mangle -A POSTROUTING -j
> > TEE --gateway 192.168.1.40
> > iptables: No chain/target/match by that name.
> >
> >
> > Please advise.
> >
> > Thank you very much.
> >
> > Teo En Ming
------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!